@tearleads/client-sdk 0.1.63 → 0.1.65

package/data/sqlite/securityIncidentSchema.d.ts

@@ -1,224 +0,0 @@
-/**
- * Durable local evidence that an SDK trust-boundary verification failed.
- *
- * Error messages and decrypted values are deliberately excluded. Callers may
- * attach only hashes that were already part of the verified protocol object.
- * Repeated detections of the same evidence update only the occurrence count
- * and last-detected timestamp. Remote-state resets do not include this table,
- * so an API rollback cannot erase the client's record of having detected it.
- */
-export declare const securityIncidents: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
-    name: "security_incidents";
-    schema: undefined;
-    columns: {
-        id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "id";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: true;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        trustDomain: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "trust_domain";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        code: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "code";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        operation: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "operation";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        objectKind: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "object_kind";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        objectId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "object_id";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        organizationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "organization_id";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        evidenceHashes: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "evidence_hashes";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        detectedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "detected_at";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        lastDetectedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "last_detected_at";
-            tableName: "security_incidents";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        occurrenceCount: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "occurrence_count";
-            tableName: "security_incidents";
-            dataType: "number";
-            columnType: "SQLiteInteger";
-            data: number;
-            driverParam: number;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-    };
-    dialect: "sqlite";
-}>;
-export declare const securityIncidentTable: import("./sqlTableSchema.js").SqlTableSchema;

package/data/sqlite/securityIncidentSchema.js

@@ -1,28 +0,0 @@
-import { index, integer, sqliteTable, text } from "drizzle-orm/sqlite-core";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
-/**
- * Durable local evidence that an SDK trust-boundary verification failed.
- *
- * Error messages and decrypted values are deliberately excluded. Callers may
- * attach only hashes that were already part of the verified protocol object.
- * Repeated detections of the same evidence update only the occurrence count
- * and last-detected timestamp. Remote-state resets do not include this table,
- * so an API rollback cannot erase the client's record of having detected it.
- */
-export const securityIncidents = sqliteTable("security_incidents", {
-    id: text("id").primaryKey(),
-    trustDomain: text("trust_domain"),
-    code: text("code").notNull(),
-    operation: text("operation").notNull(),
-    objectKind: text("object_kind").notNull(),
-    objectId: text("object_id"),
-    organizationId: text("organization_id"),
-    evidenceHashes: text("evidence_hashes").notNull(),
-    detectedAt: text("detected_at").notNull(),
-    lastDetectedAt: text("last_detected_at").notNull(),
-    occurrenceCount: integer("occurrence_count").notNull().default(1),
-}, (table) => [
-    index("security_incidents_trust_last_detected_idx").on(table.trustDomain, table.lastDetectedAt),
-]);
-export const securityIncidentTable = defineSqlTableSchema(securityIncidents);
-//# sourceMappingURL=securityIncidentSchema.js.map

package/data/sqlite/securityIncidentSchema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"securityIncidentSchema.js","sourceRoot":"","sources":["securityIncidentSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAC1C,oBAAoB,EACpB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACtC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IAClD,eAAe,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,4CAA4C,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,iBAAiB,CAAC,CAAC","sourcesContent":["import { index, integer, sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema } from \"./sqlTableSchema\";\n\n/**\n * Durable local evidence that an SDK trust-boundary verification failed.\n *\n * Error messages and decrypted values are deliberately excluded. Callers may\n * attach only hashes that were already part of the verified protocol object.\n * Repeated detections of the same evidence update only the occurrence count\n * and last-detected timestamp. Remote-state resets do not include this table,\n * so an API rollback cannot erase the client's record of having detected it.\n */\nexport const securityIncidents = sqliteTable(\n  \"security_incidents\",\n  {\n    id: text(\"id\").primaryKey(),\n    trustDomain: text(\"trust_domain\"),\n    code: text(\"code\").notNull(),\n    operation: text(\"operation\").notNull(),\n    objectKind: text(\"object_kind\").notNull(),\n    objectId: text(\"object_id\"),\n    organizationId: text(\"organization_id\"),\n    evidenceHashes: text(\"evidence_hashes\").notNull(),\n    detectedAt: text(\"detected_at\").notNull(),\n    lastDetectedAt: text(\"last_detected_at\").notNull(),\n    occurrenceCount: integer(\"occurrence_count\").notNull().default(1),\n  },\n  (table) => [\n    index(\"security_incidents_trust_last_detected_idx\").on(\n      table.trustDomain,\n      table.lastDetectedAt,\n    ),\n  ],\n);\n\nexport const securityIncidentTable = defineSqlTableSchema(securityIncidents);\n"]}

package/data/sqlite/verifiedManifestBundleSchema.d.ts

@@ -1,174 +0,0 @@
-import { type SqlTableSchema } from "./sqlTableSchema.js";
-/**
- * Access-manifest bundles this device verified inside a writer projection,
- * keyed by manifest hash. A later projection read cites them so the API can
- * omit their bytes; the client refills each omission from this row and
- * verifies the rebuilt projection from scratch. Rows are neither trust nor
- * checkpoint state: a missing, evicted, or damaged row only costs bytes.
- *
- * Columns:
- * - `manifestHash`: Manifest hash; equals the stored bundle's `manifestHash`.
- * - `organizationId`, `objectKind`, `objectId`, `epoch`: The verified
- *   manifest's object, used to cite the lineage relevant to a request.
- * - `bundleJson`: The exact verified bundle as JSON.
- * - `bundleDigest`: SHA-256 hex of `bundleJson`; a mismatch drops the row.
- * - `verifiedAt`: Latest local verification time; oldest rows evict first.
- */
-export declare const verifiedAccessManifestBundles: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
-    name: "verified_access_manifest_bundles";
-    schema: undefined;
-    columns: {
-        manifestHash: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "manifest_hash";
-            tableName: "verified_access_manifest_bundles";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: true;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        organizationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "organization_id";
-            tableName: "verified_access_manifest_bundles";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        objectKind: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "object_kind";
-            tableName: "verified_access_manifest_bundles";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        objectId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "object_id";
-            tableName: "verified_access_manifest_bundles";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        epoch: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "epoch";
-            tableName: "verified_access_manifest_bundles";
-            dataType: "number";
-            columnType: "SQLiteInteger";
-            data: number;
-            driverParam: number;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        bundleJson: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "bundle_json";
-            tableName: "verified_access_manifest_bundles";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        bundleDigest: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "bundle_digest";
-            tableName: "verified_access_manifest_bundles";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        verifiedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "verified_at";
-            tableName: "verified_access_manifest_bundles";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-    };
-    dialect: "sqlite";
-}>;
-export declare const verifiedManifestBundleTables: ReadonlyArray<SqlTableSchema>;

package/data/sqlite/verifiedManifestBundleSchema.js

@@ -1,36 +0,0 @@
-import { desc } from "drizzle-orm";
-import { index, integer, sqliteTable, text } from "drizzle-orm/sqlite-core";
-import { defineSqlTableSchema } from "./sqlTableSchema.js";
-/**
- * Access-manifest bundles this device verified inside a writer projection,
- * keyed by manifest hash. A later projection read cites them so the API can
- * omit their bytes; the client refills each omission from this row and
- * verifies the rebuilt projection from scratch. Rows are neither trust nor
- * checkpoint state: a missing, evicted, or damaged row only costs bytes.
- *
- * Columns:
- * - `manifestHash`: Manifest hash; equals the stored bundle's `manifestHash`.
- * - `organizationId`, `objectKind`, `objectId`, `epoch`: The verified
- *   manifest's object, used to cite the lineage relevant to a request.
- * - `bundleJson`: The exact verified bundle as JSON.
- * - `bundleDigest`: SHA-256 hex of `bundleJson`; a mismatch drops the row.
- * - `verifiedAt`: Latest local verification time; oldest rows evict first.
- */
-export const verifiedAccessManifestBundles = sqliteTable("verified_access_manifest_bundles", {
-    manifestHash: text("manifest_hash").primaryKey(),
-    organizationId: text("organization_id").notNull(),
-    objectKind: text("object_kind").notNull(),
-    objectId: text("object_id").notNull(),
-    epoch: integer("epoch").notNull(),
-    bundleJson: text("bundle_json").notNull(),
-    bundleDigest: text("bundle_digest").notNull(),
-    verifiedAt: text("verified_at").notNull(),
-}, (table) => [
-    index("verified_access_manifest_bundles_object_idx").on(table.objectKind, table.objectId, desc(table.epoch)),
-    index("verified_access_manifest_bundles_verified_at_idx").on(table.verifiedAt),
-    index("verified_access_manifest_bundles_organization_idx").on(table.organizationId),
-]);
-export const verifiedManifestBundleTables = [
-    defineSqlTableSchema(verifiedAccessManifestBundles),
-];
-//# sourceMappingURL=verifiedManifestBundleSchema.js.map

package/data/sqlite/verifiedManifestBundleSchema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifiedManifestBundleSchema.js","sourceRoot":"","sources":["verifiedManifestBundleSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAE7E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CACtD,kCAAkC,EAClC;IACE,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,UAAU,EAAE;IAChD,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IACjC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;CAC1C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,6CAA6C,CAAC,CAAC,EAAE,CACrD,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,QAAQ,EACd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAClB;IACD,KAAK,CAAC,kDAAkD,CAAC,CAAC,EAAE,CAC1D,KAAK,CAAC,UAAU,CACjB;IACD,KAAK,CAAC,mDAAmD,CAAC,CAAC,EAAE,CAC3D,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE,oBAAoB,CAAC,6BAA6B,CAAC;CACpD,CAAC","sourcesContent":["import { desc } from \"drizzle-orm\";\nimport { index, integer, sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"./sqlTableSchema\";\n\n/**\n * Access-manifest bundles this device verified inside a writer projection,\n * keyed by manifest hash. A later projection read cites them so the API can\n * omit their bytes; the client refills each omission from this row and\n * verifies the rebuilt projection from scratch. Rows are neither trust nor\n * checkpoint state: a missing, evicted, or damaged row only costs bytes.\n *\n * Columns:\n * - `manifestHash`: Manifest hash; equals the stored bundle's `manifestHash`.\n * - `organizationId`, `objectKind`, `objectId`, `epoch`: The verified\n *   manifest's object, used to cite the lineage relevant to a request.\n * - `bundleJson`: The exact verified bundle as JSON.\n * - `bundleDigest`: SHA-256 hex of `bundleJson`; a mismatch drops the row.\n * - `verifiedAt`: Latest local verification time; oldest rows evict first.\n */\nexport const verifiedAccessManifestBundles = sqliteTable(\n  \"verified_access_manifest_bundles\",\n  {\n    manifestHash: text(\"manifest_hash\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    objectKind: text(\"object_kind\").notNull(),\n    objectId: text(\"object_id\").notNull(),\n    epoch: integer(\"epoch\").notNull(),\n    bundleJson: text(\"bundle_json\").notNull(),\n    bundleDigest: text(\"bundle_digest\").notNull(),\n    verifiedAt: text(\"verified_at\").notNull(),\n  },\n  (table) => [\n    index(\"verified_access_manifest_bundles_object_idx\").on(\n      table.objectKind,\n      table.objectId,\n      desc(table.epoch),\n    ),\n    index(\"verified_access_manifest_bundles_verified_at_idx\").on(\n      table.verifiedAt,\n    ),\n    index(\"verified_access_manifest_bundles_organization_idx\").on(\n      table.organizationId,\n    ),\n  ],\n);\n\nexport const verifiedManifestBundleTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(verifiedAccessManifestBundles),\n];\n"]}

package/stores/container-contents/backgroundHydration.js

@@ -1,32 +0,0 @@
-import { reportKeyingVerificationErrorInCauseChain } from "../../data/keyingProjectionVerification/error.js";
-import { errorMessage } from "../../data/shared/errorMessage.js";
-import { isDatabaseUnavailableError } from "../../workflows/container-contents/syncLane.js";
-/** Observe a background refresh without changing the caller's rejection. */
-export function observeContainerBackgroundHydration(state, hydration) {
-    const generation = state.lifecycleGeneration;
-    const runtime = state.runtime;
-    void hydration.catch(async (error) => {
-        if (state.lifecycleGeneration !== generation ||
-            isDatabaseUnavailableError(error))
-            return;
-        await reportKeyingVerificationErrorInCauseChain(error, runtime.util.reportSecurityIncident, {
-            objectId: null,
-            objectKind: "container",
-            operation: "container.hydration.background",
-            organizationId: runtime.auth.organizationId,
-        });
-        try {
-            const message = "Container background hydration failed";
-            if (runtime.util.logError) {
-                await runtime.util.logError(message, error);
-            }
-            else {
-                await runtime.util.log(`${message}: ${errorMessage(error)}`);
-            }
-        }
-        catch {
-            // A host logger must not turn an observed refusal into a new rejection.
-        }
-    });
-}
-//# sourceMappingURL=backgroundHydration.js.map

package/stores/container-contents/backgroundHydration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"backgroundHydration.js","sourceRoot":"","sources":["backgroundHydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yCAAyC,EAAE,MAAM,+CAA+C,CAAC;AAC1G,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAGzF,4EAA4E;AAC5E,MAAM,UAAU,mCAAmC,CACjD,KAAsC,EACtC,SAAwB;IAExB,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QAC5C,IACE,KAAK,CAAC,mBAAmB,KAAK,UAAU;YACxC,0BAA0B,CAAC,KAAK,CAAC;YAEjC,OAAO;QAET,MAAM,yCAAyC,CAC7C,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,gCAAgC;YAC3C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,CACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,uCAAuC,CAAC;YACxD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { reportKeyingVerificationErrorInCauseChain } from \"../../data/keyingProjectionVerification/error\";\nimport { errorMessage } from \"../../data/shared/errorMessage\";\nimport { isDatabaseUnavailableError } from \"../../workflows/container-contents/syncLane\";\nimport type { ContainerContentsStoreSyncState } from \"./syncAgentTypes\";\n\n/** Observe a background refresh without changing the caller's rejection. */\nexport function observeContainerBackgroundHydration(\n  state: ContainerContentsStoreSyncState,\n  hydration: Promise<void>,\n): void {\n  const generation = state.lifecycleGeneration;\n  const runtime = state.runtime;\n  void hydration.catch(async (error: unknown) => {\n    if (\n      state.lifecycleGeneration !== generation ||\n      isDatabaseUnavailableError(error)\n    )\n      return;\n\n    await reportKeyingVerificationErrorInCauseChain(\n      error,\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: null,\n        objectKind: \"container\",\n        operation: \"container.hydration.background\",\n        organizationId: runtime.auth.organizationId,\n      },\n    );\n    try {\n      const message = \"Container background hydration failed\";\n      if (runtime.util.logError) {\n        await runtime.util.logError(message, error);\n      } else {\n        await runtime.util.log(`${message}: ${errorMessage(error)}`);\n      }\n    } catch {\n      // A host logger must not turn an observed refusal into a new rejection.\n    }\n  });\n}\n"]}

package/stores/container-contents/containerPurgeCore.js

@@ -1,98 +0,0 @@
-import { purgeContainerTree } from "../../workflows/container-contents/container-state/purgeTree.js";
-import { prepareContainerDocumentRotationSnapshot } from "./documentRotation.js";
-import { getContainerContentsStoreLogLabel } from "./logLabel.js";
-import { updateContainerContentsSnapshot } from "./state.js";
-/** @internal Reconciles any completed destructive prefix after expiry. */
-export async function refreshAfterStalePurge(input) {
-    const remoteParentIds = new Set();
-    for (const remoteDeletedContainerId of input.remoteDeletedContainerIds) {
-        const purgedState = input.containerStatesAtStart.get(remoteDeletedContainerId);
-        if (purgedState?.record.documentId) {
-            remoteParentIds.add(purgedState.container.parentId);
-        }
-    }
-    input.state.localContainersNeedRefresh = true;
-    await input.syncAgent.refreshLocalContainers();
-    let removedState = false;
-    for (const purgedContainerId of input.purgedContainerIds) {
-        const deletedState = input.containerStatesAtStart.get(purgedContainerId);
-        if (deletedState &&
-            input.state.containersById.get(purgedContainerId) === deletedState) {
-            input.state.containersById.delete(purgedContainerId);
-            removedState = true;
-        }
-    }
-    input.state.documentStoresNeedPriming = true;
-    if (removedState && input.state.initialized) {
-        updateContainerContentsSnapshot(input.state);
-    }
-    if (remoteParentIds.size > 0) {
-        await input.syncAgent.requestRemoteHydration({
-            followDiscoveredParentLanes: false,
-            parentIds: [...remoteParentIds],
-            resetAllLaneWatermarks: true,
-        });
-    }
-}
-// Shared core of the two recursive purge operations (purgeContainer and
-// emptyTrash): guard readiness and the remote-authority gate, run the
-// recursive purge engine, drop the purged containers from the tree, and log
-// the outcome. The operations differ only in target validation, whether the
-// root container itself survives, and how the result is described/judged.
-export async function runContainerPurge(state, syncAgent, containerId, options, isCurrent, operation) {
-    if (state.runtime.infra.dbStatus !== "ready" || !state.snapshot.ready) {
-        return false;
-    }
-    const targetState = state.containersById.get(containerId);
-    if (!targetState || !operation.validateTarget(targetState)) {
-        return false;
-    }
-    // Any remote container or document in the subtree needs the server, so require
-    // auth + online when the target itself is remote (a local-only subtree can be
-    // torn down offline, matching deleteContainer's gate).
-    const isRemoteContainer = Boolean(targetState.record.documentId);
-    if (isRemoteContainer &&
-        (!state.runtime.auth.isAuthenticated || !state.runtime.state.online)) {
-        return false;
-    }
-    const containerStatesAtStart = new Map(state.containersById);
-    const result = await purgeContainerTree({
-        containersById: state.containersById,
-        keepRootContainer: operation.keepRootContainer ?? false,
-        onProgress: options?.onProgress,
-        persistence: state.persistence,
-        prepareDocumentRotationSnapshot: (document) => prepareContainerDocumentRotationSnapshot(state.runtime, document),
-        resolveProjectionUserKey: state.resolveProjectionUserKey,
-        rootContainerId: containerId,
-        runtime: state.runtime,
-        signal: options?.signal,
-        stillCurrent: isCurrent,
-    });
-    if (!result) {
-        return false;
-    }
-    const purgedContainerIds = new Set(result.purgedContainerIds);
-    const hasUnsettledRemoteDelete = result.remoteDeletedContainerIds.some((containerId) => !purgedContainerIds.has(containerId));
-    if (!isCurrent() || hasUnsettledRemoteDelete) {
-        await refreshAfterStalePurge({
-            completedCount: result.completedCount,
-            containerStatesAtStart,
-            purgedContainerIds: result.purgedContainerIds,
-            remoteDeletedContainerIds: result.remoteDeletedContainerIds,
-            state,
-            syncAgent,
-        });
-        return false;
-    }
-    for (const purgedContainerId of result.purgedContainerIds) {
-        state.containersById.delete(purgedContainerId);
-    }
-    // Only re-render when something actually left the tree; a fully-failed or
-    // immediately-cancelled run changed nothing.
-    if (result.purgedContainerIds.length > 0) {
-        updateContainerContentsSnapshot(state);
-    }
-    state.runtime.util.log(`${getContainerContentsStoreLogLabel(state)}: ${operation.describeResult(targetState, result)}`);
-    return operation.didSucceed(result);
-}
-//# sourceMappingURL=containerPurgeCore.js.map

package/stores/container-contents/containerPurgeCore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"containerPurgeCore.js","sourceRoot":"","sources":["containerPurgeCore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,wCAAwC,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAY1D,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAO5C;IACC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAiB,CAAC;IACjD,KAAK,MAAM,wBAAwB,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;QACvE,MAAM,WAAW,GAAG,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAClD,wBAAwB,CACzB,CAAC;QACF,IAAI,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YACnC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAC9C,MAAM,KAAK,CAAC,SAAS,CAAC,sBAAsB,EAAE,CAAC;IAC/C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,iBAAiB,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACzE,IACE,YAAY;YACZ,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,YAAY,EAClE,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACrD,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC;IAC7C,IAAI,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC5C,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,SAAS,CAAC,sBAAsB,CAAC;YAC3C,2BAA2B,EAAE,KAAK;YAClC,SAAS,EAAE,CAAC,GAAG,eAAe,CAAC;YAC/B,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAkC,EAClC,SAA0C,EAC1C,WAAmB,EACnB,OAAiC,EACjC,SAA8B,EAC9B,SAQC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,uDAAuD;IACvD,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjE,IACE,iBAAiB;QACjB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EACpE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;QACtC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,IAAI,KAAK;QACvD,UAAU,EAAE,OAAO,EAAE,UAAU;QAC/B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,+BAA+B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC5C,wCAAwC,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;QACnE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,eAAe,EAAE,WAAW;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,OAAO,EAAE,MAAM;QACvB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9D,MAAM,wBAAwB,GAAG,MAAM,CAAC,yBAAyB,CAAC,IAAI,CACpE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CACtD,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,IAAI,wBAAwB,EAAE,CAAC;QAC7C,MAAM,sBAAsB,CAAC;YAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,sBAAsB;YACtB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,KAAK;YACL,SAAS;SACV,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,iBAAiB,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC1D,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC;IACD,0EAA0E;IAC1E,6CAA6C;IAC7C,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAChG,CAAC;IACF,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC","sourcesContent":["import type { PurgeOptions } from \"../../workflows/container-contents/container-state/purgeProgress\";\nimport { purgeContainerTree } from \"../../workflows/container-contents/container-state/purgeTree\";\nimport { prepareContainerDocumentRotationSnapshot } from \"./documentRotation\";\nimport { getContainerContentsStoreLogLabel } from \"./logLabel\";\nimport { updateContainerContentsSnapshot } from \"./state\";\nimport type {\n  ContainerContentsStoreSyncAgent,\n  ContainerState,\n} from \"./syncAgent\";\nimport type { ContainerContentsStoreState } from \"./types\";\nimport type { ContainerWriteGuard } from \"./writeGeneration\";\n\ntype ContainerPurgeResult = NonNullable<\n  Awaited<ReturnType<typeof purgeContainerTree>>\n>;\n\n/** @internal Reconciles any completed destructive prefix after expiry. */\nexport async function refreshAfterStalePurge(input: {\n  completedCount: number;\n  containerStatesAtStart: ReadonlyMap<string, ContainerState>;\n  purgedContainerIds: readonly string[];\n  remoteDeletedContainerIds: readonly string[];\n  state: ContainerContentsStoreState;\n  syncAgent: ContainerContentsStoreSyncAgent;\n}): Promise<void> {\n  const remoteParentIds = new Set<string | null>();\n  for (const remoteDeletedContainerId of input.remoteDeletedContainerIds) {\n    const purgedState = input.containerStatesAtStart.get(\n      remoteDeletedContainerId,\n    );\n    if (purgedState?.record.documentId) {\n      remoteParentIds.add(purgedState.container.parentId);\n    }\n  }\n\n  input.state.localContainersNeedRefresh = true;\n  await input.syncAgent.refreshLocalContainers();\n  let removedState = false;\n  for (const purgedContainerId of input.purgedContainerIds) {\n    const deletedState = input.containerStatesAtStart.get(purgedContainerId);\n    if (\n      deletedState &&\n      input.state.containersById.get(purgedContainerId) === deletedState\n    ) {\n      input.state.containersById.delete(purgedContainerId);\n      removedState = true;\n    }\n  }\n  input.state.documentStoresNeedPriming = true;\n  if (removedState && input.state.initialized) {\n    updateContainerContentsSnapshot(input.state);\n  }\n  if (remoteParentIds.size > 0) {\n    await input.syncAgent.requestRemoteHydration({\n      followDiscoveredParentLanes: false,\n      parentIds: [...remoteParentIds],\n      resetAllLaneWatermarks: true,\n    });\n  }\n}\n\n// Shared core of the two recursive purge operations (purgeContainer and\n// emptyTrash): guard readiness and the remote-authority gate, run the\n// recursive purge engine, drop the purged containers from the tree, and log\n// the outcome. The operations differ only in target validation, whether the\n// root container itself survives, and how the result is described/judged.\nexport async function runContainerPurge(\n  state: ContainerContentsStoreState,\n  syncAgent: ContainerContentsStoreSyncAgent,\n  containerId: string,\n  options: PurgeOptions | undefined,\n  isCurrent: ContainerWriteGuard,\n  operation: {\n    describeResult: (\n      target: ContainerState,\n      result: ContainerPurgeResult,\n    ) => string;\n    didSucceed: (result: ContainerPurgeResult) => boolean;\n    keepRootContainer?: boolean | undefined;\n    validateTarget: (target: ContainerState) => boolean;\n  },\n): Promise<boolean> {\n  if (state.runtime.infra.dbStatus !== \"ready\" || !state.snapshot.ready) {\n    return false;\n  }\n\n  const targetState = state.containersById.get(containerId);\n  if (!targetState || !operation.validateTarget(targetState)) {\n    return false;\n  }\n\n  // Any remote container or document in the subtree needs the server, so require\n  // auth + online when the target itself is remote (a local-only subtree can be\n  // torn down offline, matching deleteContainer's gate).\n  const isRemoteContainer = Boolean(targetState.record.documentId);\n  if (\n    isRemoteContainer &&\n    (!state.runtime.auth.isAuthenticated || !state.runtime.state.online)\n  ) {\n    return false;\n  }\n  const containerStatesAtStart = new Map(state.containersById);\n\n  const result = await purgeContainerTree({\n    containersById: state.containersById,\n    keepRootContainer: operation.keepRootContainer ?? false,\n    onProgress: options?.onProgress,\n    persistence: state.persistence,\n    prepareDocumentRotationSnapshot: (document) =>\n      prepareContainerDocumentRotationSnapshot(state.runtime, document),\n    resolveProjectionUserKey: state.resolveProjectionUserKey,\n    rootContainerId: containerId,\n    runtime: state.runtime,\n    signal: options?.signal,\n    stillCurrent: isCurrent,\n  });\n  if (!result) {\n    return false;\n  }\n  const purgedContainerIds = new Set(result.purgedContainerIds);\n  const hasUnsettledRemoteDelete = result.remoteDeletedContainerIds.some(\n    (containerId) => !purgedContainerIds.has(containerId),\n  );\n  if (!isCurrent() || hasUnsettledRemoteDelete) {\n    await refreshAfterStalePurge({\n      completedCount: result.completedCount,\n      containerStatesAtStart,\n      purgedContainerIds: result.purgedContainerIds,\n      remoteDeletedContainerIds: result.remoteDeletedContainerIds,\n      state,\n      syncAgent,\n    });\n    return false;\n  }\n\n  for (const purgedContainerId of result.purgedContainerIds) {\n    state.containersById.delete(purgedContainerId);\n  }\n  // Only re-render when something actually left the tree; a fully-failed or\n  // immediately-cancelled run changed nothing.\n  if (result.purgedContainerIds.length > 0) {\n    updateContainerContentsSnapshot(state);\n  }\n  state.runtime.util.log(\n    `${getContainerContentsStoreLogLabel(state)}: ${operation.describeResult(targetState, result)}`,\n  );\n  return operation.didSucceed(result);\n}\n"]}

package/stores/container-contents/containerStateMap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"containerStateMap.js","sourceRoot":"","sources":["containerStateMap.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,iBAAkB,SAAQ,GAA2B;IACvD,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7D,uBAAuB,GAAG,CAAC,CAAC;IAE5B,YAAY,OAA6C;QACvD,KAAK,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YACjD,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAEQ,KAAK;QACZ,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAEQ,MAAM,CAAC,WAAmB;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1C,sEAAsE;QACtE,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEQ,GAAG,CAAC,WAAmB,EAAE,KAAqB;QACrD,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,0BAA0B;QACxB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IAED,gBAAgB,CACd,WAAmB,EACnB,QAAqC;QAErC,OAAO,CACL,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CACjC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,WAAmB;QACxC,IAAI,CAAC,uBAAuB,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC9E,CAAC;CACF;AAED,MAAM,UAAU,wCAAwC,CACtD,MAAmC;IAEnC,OAAO,MAAM,YAAY,iBAAiB;QACxC,CAAC,CAAC,MAAM,CAAC,0BAA0B,EAAE;QACrC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAmC,EACnC,WAAmB,EACnB,QAAqC;IAErC,OAAO,CACL,MAAM,YAAY,iBAAiB;QACnC,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAC/C,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerState } from \"../../workflows/container-contents/remoteHydration\";\n\nexport class ContainerStateMap extends Map<string, ContainerState> {\n  readonly #mutationGenerationById = new Map<string, number>();\n  #nextMutationGeneration = 0;\n\n  constructor(entries?: ReadonlyMap<string, ContainerState>) {\n    super();\n    for (const [containerId, state] of entries ?? []) {\n      super.set(containerId, state);\n    }\n  }\n\n  override clear(): void {\n    for (const containerId of this.keys()) {\n      this.recordMutation(containerId);\n    }\n    super.clear();\n  }\n\n  override delete(containerId: string): boolean {\n    const deleted = super.delete(containerId);\n    // An absent delete is still an authoritative tombstone observation. A\n    // local-refresh query that started before it must not install a stale row\n    // merely because no in-memory value existed for Map.delete to remove.\n    this.recordMutation(containerId);\n    return deleted;\n  }\n\n  override set(containerId: string, state: ContainerState): this {\n    this.recordMutation(containerId);\n    return super.set(containerId, state);\n  }\n\n  captureMutationGenerations(): ReadonlyMap<string, number> {\n    return new Map(this.#mutationGenerationById);\n  }\n\n  hasMutationAfter(\n    containerId: string,\n    baseline: ReadonlyMap<string, number>,\n  ): boolean {\n    return (\n      (this.#mutationGenerationById.get(containerId) ?? 0) !==\n      (baseline.get(containerId) ?? 0)\n    );\n  }\n\n  private recordMutation(containerId: string): void {\n    this.#nextMutationGeneration += 1;\n    this.#mutationGenerationById.set(containerId, this.#nextMutationGeneration);\n  }\n}\n\nexport function captureContainerStateMutationGenerations(\n  states: Map<string, ContainerState>,\n): ReadonlyMap<string, number> {\n  return states instanceof ContainerStateMap\n    ? states.captureMutationGenerations()\n    : new Map();\n}\n\nexport function containerStateMutatedAfter(\n  states: Map<string, ContainerState>,\n  containerId: string,\n  baseline: ReadonlyMap<string, number>,\n): boolean {\n  return (\n    states instanceof ContainerStateMap &&\n    states.hasMutationAfter(containerId, baseline)\n  );\n}\n"]}